Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft
File:                     4TxHTdRFcajO9AZpTgStasYbJWY.mft (raw, json)
Hash identifier:          ebDAO004SQ2JvY2YlNz9SF59N/+FhKxdgzmP/QU4k3U=
Subject key identifier:   A6:07:94:DB:6F:78:72:ED:37:DD:55:C3:DF:73:6B:24:74:6B:91:84
Authority key identifier: E1:3C:47:4D:D4:45:71:A8:CE:F4:06:69:4E:04:AD:6A:C6:1B:25:66
Certificate issuer:       /CN=A919D313/serialNumber=E13C474DD44571A8CEF406694E04AD6AC61B2566
Certificate serial:       D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft
Manifest number:          D0
Signing time:             Mon 25 Nov 2024 03:44:37 +0000
Manifest this update:     Mon 25 Nov 2024 03:44:37 +0000
Manifest next update:     Mon 02 Dec 2024 03:44:37 +0000
Files and hashes:         1: 4TxHTdRFcajO9AZpTgStasYbJWY.crl (hash: 0bKbwCK89f62ccY3wLwGLqIDObh3LlzO6N/6Gci9iPA=)
                          2: 658CF9F2721411EEAC707910C4F9AE02.roa (hash: ZZDUXnqWBktvzLbgCqaw7CbFJvjtpkfDVEMt//M7XVU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.crl
                          rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 03:42:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210 (0xd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D313/serialNumber=E13C474DD44571A8CEF406694E04AD6AC61B2566
        Validity
            Not Before: Nov 25 03:44:37 2024 GMT
            Not After : Dec  2 03:44:37 2024 GMT
        Subject: CN=6743f2a5-dc84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3e:d1:3a:c8:4b:90:d6:5e:82:16:fc:64:eb:
                    4b:70:43:9d:ff:ea:14:15:c5:af:ad:12:e6:85:d2:
                    74:0a:a6:0a:8d:59:c9:30:47:0b:52:17:8c:a2:15:
                    54:8d:11:5b:9b:4d:a2:a1:2f:a2:81:d9:64:d3:7b:
                    b0:88:ad:0e:42:4e:ff:83:ca:2f:91:5e:cb:bb:ff:
                    cf:97:75:d1:92:0d:41:a6:65:31:29:58:67:80:cf:
                    6f:41:0b:f6:1a:ea:25:69:5d:ed:d9:18:99:c5:f2:
                    7e:a2:c2:a0:52:12:f2:93:95:78:ef:d4:f8:4a:b9:
                    8a:80:e4:81:4b:4b:82:1c:33:45:71:5f:0a:f5:cd:
                    03:29:ff:e4:ee:1a:46:60:30:e8:06:39:55:5b:5b:
                    94:4e:28:38:d1:05:e9:89:f8:dc:11:61:47:36:33:
                    4b:78:fe:97:c4:20:03:52:6b:1e:88:b8:de:80:b7:
                    63:ae:18:26:45:c7:bb:88:6e:d9:2b:51:8c:34:c9:
                    ae:d4:c6:54:8d:35:98:8f:c5:bd:20:e5:d6:fb:cc:
                    a6:35:fe:2e:8c:2e:a8:d8:79:b7:ba:4c:f5:bd:35:
                    cf:69:52:7f:36:5a:61:1b:3a:5b:2f:64:e3:78:06:
                    ea:5b:ad:1a:1c:04:9c:55:f8:34:84:bc:92:c1:12:
                    08:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:07:94:DB:6F:78:72:ED:37:DD:55:C3:DF:73:6B:24:74:6B:91:84
            X509v3 Authority Key Identifier:
                keyid:E1:3C:47:4D:D4:45:71:A8:CE:F4:06:69:4E:04:AD:6A:C6:1B:25:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:bb:e6:95:7a:ce:5f:4c:5e:ea:93:34:d2:17:38:35:f5:72:
         b6:40:af:59:b1:48:b3:76:7a:db:da:b3:dd:c4:eb:d5:5c:67:
         ef:a6:5d:5d:f4:bb:91:06:f0:5b:8a:e7:ba:62:20:7d:ac:4f:
         e8:6b:92:37:f4:09:bc:10:74:9d:b7:bb:b0:b2:9b:f5:c5:2d:
         46:9a:aa:1f:a3:e4:ee:0b:d2:c1:28:19:f6:0d:41:60:e3:95:
         ac:63:d1:84:59:08:c9:15:cb:bc:3f:5d:1a:42:17:35:70:20:
         92:16:ab:40:17:52:1d:73:8b:f4:c8:92:27:21:36:95:a2:26:
         23:fa:24:70:9c:7d:36:b1:0a:5e:ce:2d:fc:e2:15:03:63:03:
         fd:b8:c4:0f:58:93:79:be:5a:0b:ed:30:03:43:fe:6e:eb:79:
         e0:df:7c:1e:86:b0:ee:ce:ac:11:92:5c:54:e3:24:99:85:b0:
         cb:53:75:3f:90:b1:7f:05:07:9e:5d:85:0c:b5:71:ee:0d:06:
         34:51:37:e4:73:30:35:b9:66:5f:1b:c9:20:67:a3:0c:ab:d5:
         1e:2f:27:b0:0c:ed:f3:c1:c6:26:6d:97:1c:45:f1:d5:bd:f0:
         04:aa:d2:7e:30:9b:95:49:fa:5e:6c:7d:3d:1b:63:d4:fc:79:
         ab:e5:0d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:43:57 2024 by rpki-client on console-ams.rpki-client.org